Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in display.php in Simple Machines Forum (SMF) 1.1 Final and earlier allows remote attackers to inject arbitrary web script or HTML via the contents of a file that is uploaded with the image parameter set, which can be interpreted as script by Internet Explorer's automatic type detection.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Simple Machines Forum (SMF) 'display.php' 跨站脚本攻击漏洞
Vulnerability Description
Simple Machines Forum (SMF) 1.1 Final及更早版本中的display.php存在跨站脚本攻击(XSS)漏洞，远程攻击者可通过已上载的带有图像参数集的文件的内容(可被Internet Explorer的自动类型侦测解释为脚本)来注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A